Skip to content

Add nonce to <style> element created by HtmlDumper #1465

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Merged
merged 1 commit into from
Feb 9, 2024

Conversation

Yannik
Copy link
Contributor

@Yannik Yannik commented Sep 19, 2023

This PR, in combination with another PR to maximebf/php-debugbar (yet to come, I haven't figured out a good solution yet), will fix the style-src csp errors.

@Yannik
Copy link
Contributor Author

Yannik commented Sep 19, 2023

In combination with php-debugbar/php-debugbar#562, all style-src csp errors I could find are now eradicated.

@parallels999
Copy link
Contributor

DebugBar/JavascriptRenderer.php#L1050

Must be changed??

@Yannik
Copy link
Contributor Author

Yannik commented Sep 19, 2023

@parallels999 as far as I'm aware, there are currently no style elements within $js. We could change it as future proofing. But I don't see a definitive need.

@Yannik
Copy link
Contributor Author

Yannik commented Dec 1, 2023

@barryvdh Would you mind reviewing this? :)

@barryvdh barryvdh merged commit 75f439f into barryvdh:master Feb 9, 2024
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants